Victor, I have lots of experience with VTAM - mainly in a "hands-on" education environment.
I have absolutely no experience at all with cryptographic products working with VTAM. I have always ignored the ENCRYPTN start option - but I do know it exists. Looking up ENCRYPTN in the CS SNA Resource Definition Reference manual, I see it can sneak up on you if you are rash enough actually to install a cryptographic product such as, I guess, ICSF. In other words, if a cryptographic product is installed and you have not specified ENCRYPTN in your start options, the default value for the ENCRYPTN start option being YES, VTAM will start to use the cryptographic product. Could this be the reason for your RACF messages? Note that it is only the description of the NO value that really makes this effect clear: <quote> ENCRYPTN=NO Specifies that VTAM does not support cryptography, regardless of whether or not a cryptographic product is currently active. </quote> I'm assuming that "before give it access" means "before you want VTAM to use ICSF". Chris Mason ----- Original Message ----- From: "Víctor de la Fuente" <[EMAIL PROTECTED]> Newsgroups: bit.listserv.ibm-main To: <[email protected]> Sent: Tuesday, 07 March, 2006 8:39 AM Subject: Annoying ICSF-RACF message Hi all! We have annoying RACF-error messages for some time. These are related to ICSF. They look like... ICH408I JOB(VTAM ) STEP(VTAM1D ) CSFKGN CL(CSFSERV ) INSUFFICIENT ACCESS AUTHORITY FROM CSF* (G) ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) ICH408I JOB(VTAM ) STEP(VTAM1D ) CSFKGN CL(CSFSERV ) INSUFFICIENT ACCESS AUTHORITY FROM CSF* (G) ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) ICH408I JOB(VTAM ) STEP(VTAM1D ) CSFKGN CL(CSFSERV ) INSUFFICIENT ACCESS AUTHORITY FROM CSF* (G) ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) ICH408I JOB(VTAM ) STEP(VTAM1D ) CSFKGN CL(CSFSERV ) INSUFFICIENT ACCESS AUTHORITY FROM CSF* (G) ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) ...and they continue for two or three screens. Yeah, we know the problem is VTAM is trying to access CSFKGN. But I'd like to know why is it trying to generate a key, before give it access. So the question is...could you give me some reasons for VTAM trying to access KGN? Thank you very much all!! Víctor ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
